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Letter from the Executive Director 



2012 WAS INDEED 
a year of creation 
and transition 
for calyx; one in which 
we took the first sub- 
stantial steps to real- 
ize our dream to focus 
the world's attention 
on prioritizing personal 
privacy and free speech 
on the Internet and in 
telecommunications 
as essential to an open 
society. Our timing 
could not have been 
better as world events 
in mid-2013, triggered 
by a former NSA con- 
tractor, have galvanized many to examine the 
propriety, if not legality, of constantly moni- 
toring every citizen regardless if any wrong- 
doing has occurred. There have been almost 
daily calls, both within and outside of gov- 
ernment, to revisit the often-ignored need to 
allow Internet and telecommunications users 
unrestrained use of these means of informa- 
tion and communication free from censor- 
ship and surveillance. 

Many organizations, both commercial 
and nonprofit, have sought to provide com- 
ponents for Internet privacy and security that 
are consolidated in calyx's mission. Some 
organizations provide software that allow 



the user to access the 
Internet over virtu- 
al private networks, 
engage in anonymous 
browsing, and transmit 
and receive encrypt- 
ed communications. 
Others provide soft- 
ware to encrypt mobile 
telephone conversa- 
tions and messaging. 
An informal survey 
of the top downloads 
from a popular down- 
load site on the Inter- 
net demonstrated that 
seven of the top twenty 
programs download- 
ed, including the top three most frequently 
downloaded programs related to privacy and 
security. In fact through 2012, even before the 
NSA scandal, nearly 11.5 million people down- 
loaded encryption software on a try-to-buy 
basis. 1 Additionally, nearly 5 million people 
downloaded privacy software to keep users' 
personal information safe while browsing the 
Internet. 2 



1. Agregate downloads from Download.cnet.com Encryption 
Software directory as at January 9, 2013. 

2. Aggregate downloads from Download.cnet.com Priva- 
cy Software library as at January 9, 2013. 
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Government studies and non-govern- 
mental polling data continue to show that 
the majority of Americans are increasingly 
concerned with online privacy, but that few 
have the time, patience or wherewithal to 
implementthe measures necessary toensure 
their online safety. 

At calyx, we are dedicated to providing 
ongoing educational instruction to the global 
public about privacy techniques, and to 
developing a large-scale platform useable by 
sensitive groups and people subject to per- 
secution. Much of this past year was spent 
developing the infrastructure that focuses on 
a seamless suite of tools that ensure privacy, 
provide the strongest encryption, remove 
metadata, research countermeasures against 
geolocation and protect users from the unin- 
tentional distribution of personally identifi- 
able information. The systems we have built 
in 2012, we plan to offer to the world (starting 
in the U.S.) in 2013. Our ultimate mission is to 
educate the public on techniques to protect 
themselves, their privacy and their speech, 
and to offer a seamless service that will allow 
users everywhere to deploy these techniques 
without having a great deal of network or 
security expertise. 

Towards these ends, and thanks to 
the many donors to calyx during the year, 
especially to those who contributed to us 
through the Indiegogo crowd-sourced funding 
campaign, we built a moderately sized server 
farm in New York. As we enter into the 2013 
fiscal year, we have made arrangements 
and partnered with another developer to 
test a suite of encryption tools to protect the 
identity of our members and global Internet 
users from prying eyes and thieves. At this 
point, calyx is testing encrypted webmail, and 
shortly will test an encrypted Internet service 
test-bed. Further elements of a suite of 



encryption tools will be available shortly to be 
tested by everyone who becomes a member 
of the Institute and the general public. We 
also have entered into an arrangement to 
provide an enhanced benefit to our substan- 
tial members who will be given access to a 
wireless broadband service available only 
to institutions such as ours. This service is 
currently available in most major cities in 
over 70 regions throughout the United States. 

Additionally, we have begun our edu- 
cational and outreach programs, and have 
continued to give presentations and partici- 
pate in symposia. As we enter 2013, we plan 
to offer significantly more programming, 
including instructional materials (and trans- 
lations) for using the Tor anonymity network 
to facilitate private Internet usage among 
those challenged in privacy protection and 
censorship and surveillance circumvention 
techniques. Media and in-person presen- 
tations will be given to facilitate an under- 
standing of appropriate selection and usage 
of free open-source encryption software to 
maximize individual privacy and free speech. 
We are redesigning our website to provide 
a robust forum of materials that may prove 
useful to those throughout the world whose 
access to the Internet and ability to commu- 
nicate may be hampered by their country's 
policies and regimes. 

the calyx institute exists to defend the 
principles of an open society in the face of 
constant political and technological forces 
pulling in the direction of Orwell's 1984. We 
hope you agree and we invite you to join us. 




Nicholas Merrill 
Executive Director 
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Mission & Objectives 



THE CALYX INSTITUTE is a not-for-profit education and research orga- 
nization devoted to studying, testing, developing, and implementing 
privacy technology and tools to educate the public and promote free 
speech, free expression, civic engagement and privacy rights on the 
Internet and in the Mobile telephone industry. 

The mission of The Calyx Institute is to educate the public about 
privacy in digital communications and to develop and test building 
blocks that Internet users can incorporate into their daily Internet 
activities, and service providers can use to build "privacy by design" into 
their service offerings. Calyx seeks to introduce privacy and anonymity 
controls into services at the root levels, and make it easier and under- 
standable for all people to use in order to achieve the ultimate goal of 
ubiquitous strong encryption available to reinforce fundamental rights 
that should be available for everyone. 
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Where We Were 



FINANCES 

CALYX RECEIVED SIGNIFICANTFUNDING 
for 2012 pursuant to a crowd funding 
campaign hosted on lndiegogo.com. 
Although begun in the final days of the prior 
fiscal year, calyx garnered in the first weeks 
of 2012 more than $70,000 from over 1,200 
donors located in almost every state in the 
United States and in nearly a dozen countries. 
This campaign provided seed money to begin 
the necessary infrastructure development, 
and to begin construction of a datacenter 
in New York to manage relay traffic through 
calyx and to form the nucleus for a test bed to 
evaluate various software applications that 
provide Internet security, anonymity, privacy 
and circumvention from censorship. 

Although modest by comparison to the 
amount needed to launch a global test bed 
and establish the educational program- 
ming contemplated by calyx, the financing 
campaign served as an important indicator 
over a short time period of the potential 
interest in calyx's mission and objectives. 

Many contributors provided very encour- 
aging feedback along with their donations, 
including: 

1. "What the calyx institute aims to 
accomplish will surely set a prec- 
edent for the betterment of the 
Information Age's future." 

2. "I think this could honestly be the 
groundwork for the most positive 
future we can hope forforthe net." 

3. "It's about time someone steps 
up and enables the use of tech- 



nology without the exposure of 
your information to others who 
have no business with it." 
4. "This is something the world 
needs in these desperate times!" 

DURING 2012, calyx also received its first con- 
sultancy assignment for back-end infrastruc- 
ture development from The Ford Foundation. 
This was significant not because of its size, 
but because it is an objective of calyx to 
advance public awareness and education 
regarding communication services using 
encryption and privacy controls. Recognition 
by The Ford Foundation and other prominent 
organizations is essential to the long-term 
success of CALYX. 

As discussed in more detail below, calyx 
also received word late this spring that it was 
awarded a grant through the New America 
Foundation to develop translation materials 
and guides to educate people located in 
foreign countries with extensive governmen- 
tal monitoring and censorship as to effective 
methods to utilize the Tor anonymity network 
to secure Internet access. 

Given the Herculean efforts provided by 
Nick Merrill, calyx was successful in managing 
its finances through this transitional year 
consistent with the modest, but significant, 
contributions from prominent funders and 
the public at large. Expenses are very carefully 
approached, first by surveying alternatives 
and then by selecting the lowest cost alterna- 
tives, always with approval of calyx's Board of 
Directors. 
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ENHANCED CALYX'S ADVISORY BOARD WITH GREATER DIVERSITY 
AND PROMINENCE WITH NEW MEMBERS 



A KEY COMPONENT of Calyx's development, programs and planning is expected to be 
determined by its stellar Advisory Board which was still under development in 2012. 
In addition to being fortunate to have the original members, Calyx was able to attract 
several new members who joined throughout the year. 




MEREDITH L. PATTERSON is an independent 
researcher whose areas of expertise range 
from CS-related topics such as database 
design, data-mining algorithms, complexity 
theory, computational linguistics, infor- 
mation security, and privacy-enhancing 
technology systems; to synthetic biology, 
design of transgenic organisms using 
low-cost, build-it-yourself lab equipment, 
and human metabolic system studies; and 
speculative fiction as a published author of 
multiple short stories, mostly science fiction. 

Meredith presented her work with Dan 
Kaminsky and Len Sassaman on breaking 
the Internet's certificate authority system (by 
creating usable, bogus certificates crafted 
to exploit ambiguity in X.509 parsing im- 
plementations using language-theoretic 
security analysis principles) at the Financial 
Cryptography 2010 conference. 



ELEANOR SAITTA is Principal Security 
Engineer at the Open Internet Tools Project 
(OpenlTP), directing the OpenlTP Peer Review 
Board for open source software and working 
on adversary modeling. She is also Technical 
Director at the International Modern Media 
Institute (IMMI), a member of the advisory 
board at Geeks Without Bounds (GWoB), 
and works on occasion as a Senior Security 
Associate with Stach &. Liu. She is a founder 
of the Constitutional Analysis Support Team 
(CAST), previously co-founded the Seat- 
tle-based Public N3rd Area hacker space, and 
works on the Trike and Briar projects. 
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BOB BARR, ESQ. is a practicing attorney in 
Atlanta, Georgia, and a former U.S. Attorney 
for the Northern District of Georgia and 
member of the United States House of Rep- 
resentatives, representing Georgia's 7th con- 
gressional district as a Republican from 1995 
to 2003. He was the Libertarian Party nominee 
for President of the United States in the 2008 




election. From 1971 to 1978, Barr was employed 
by the Central Intelligence Agency. 

From 2003 to 2008, he occupied the 
21st Century Liberties Chair for Freedom and 
Privacy at the American Conservative Union, 
and now is a member of The Constitution 
Project's Initiative on Liberty and Security. 
From 2003 to 2005 Bob was a member of 
a project at Harvard University's Kennedy 
School of Government addressing matters of 
privacy and security. Barr serves as a board 
member for Privacy International, a privacy 
watchdog group headquartered in London. 
Recognizing Bob Barr's leadership in privacy 
matters, former New York Times columnist 
William Safire called him "Mr. Privacy." 

Bob teaches constitutional law at 
Atlanta's John Marshall Law School and 
writes regularly for The Daily Caller. 



LAURA POITRAS was nominated for an 
Academy Award, an Independent Spirit Award 
and an Emmy for My Country, My Country (POV 
2006) a film about life for Iraqis under U.S. 
occupation. Her 2010 film The Oath, about two 
Yemeni men caught up in America's War on 
Terror, won the Excellence in Cinematogra- 
phy Award for U.S. Documentary at the 2010 




Sundance film festival and was nominated 
for an Emmy Award for outstanding investi- 
gative journalism. Poitras is the recipient of 
a Guggenheim Fellowship and a Media Arts 
Fellowship from the Rockefeller Foundation/ 
Tribeca Film Institute. She is alsothe recipient 
of a 2012 MacArthur Fellowship. 

She has attended the Sundance Insti- 
tute's Documentary Edit and Story Lab as 
both a fellow and creative advisor. She is 
currently working on the third part of a trilogy 
of films about America post 9/11. The third 
film will focus on how the War on Terror in- 
creasingly focuses on Americans through 
surveillance, covert activities and attacks on 
whistleblowers. 

Her work was included in the 2012 Whitney 
Biennial, where she organized a "Surveillance 
Teach-In" with Jacob Appelbaum and William 
Binney. She is on the board of the Freedom of 
the Press Foundation. 
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DEVELOPED INSTITUTIONAL 
INFRASTRUCTURE TO SUPPORT 
CALYX'S ENCRYPTION PLATFORM, 
TEST BED, DATACENTER, 
EDUCATIONAL PROGRAMS AND 
SERVICES 

■ N ADDITION TO APPROVING all of Calyx's 
activities and expenses, Calyx's Board of 
Directors specifically authorized the devel- 
opment of a server farm and authorized Calyx 
to enter into an agreement and provide Internet 
services through Calyx's servers. These de- 
velopments constitute the platform that will 
be available to members of Calyx and the 
general public to test security and encryption 
software under scalable conditions, and to 
evaluate their ability to ensure individual 
privacy and security whether in the United 
States or elsewhere around the globe. Calyx 
anticipates that its platform will be made 
available for public use by its members and 
other Internet users concerned about privacy 
and security. [These activities are expected to 
be coupled with Calyx's arrangement with the 
LEAP Access Encryption Project to test and, if 
successful, deploy a suite of end-to-end open 
source encryption software applications tools 
for use by members throughout the United 
States and the world.] 

Throughout 2012 Calyx undertook steps 
to formalize its institutional superstructure 
and adopted governance policies to support 
Calyx's budding encryption infrastructure, 
test platform, datacenter and educational 
programs and services. Throughout the year, 
the Executive Director made a number of ap- 
pearances to promote an understanding of 
an icon-centric approach to privacy policies, 
and to alert audiences about the pervasive 
intrusion of governmental surveillance in 
Internet and Mobile communications. 

Calyx a I so took steps to obtain tax-exempt 
status, and last August Calyx filed its Appli- 
cation for Recognition of Exemption under 
Section 501(c)(3) of the Internal Revenue 



Code. Calyx is still awaiting a determination 
by the exempt organizations division of the 
Internal Revenue Service, which, as widely 
reported in the press, has been under con- 
siderable scrutiny over its practices toward 
conservative and progressive organizations 
during the past several years. According- 
ly, Calyx has retained its fiscal sponsorship 
agreement with Riseup Labs, Inc., another 
nonprofit organization that is tax-exempt, 
to enable US-resident contributors to make 
tax-deductible contributions through Riseup 
Labs to Calyx to the extent provided by law. 

CONTINUED APPEARANCES, 
PRESENTATIONS AND INTERVIEWS 
IN THE PRESS 

THROUGHOUT THE YEAR, Nick was 
invited to speak before confer- 
ences, appear on television and give 
interviews in an effort to advance the core 
objective to alert the public about the per- 
vasiveness of surveillance and the lack of 
privacy in Internet use and communications. 

In June 2012, Nick on behalf of Calyx was 
invited to and spoke on governmental surveil- 
lance at the Alan Turing Centenary Conference, 
an academic conference hosted by the School 
of Computer Science at the University of 
Manchester in Edinburgh, Scotland. 

Near the end of the summer, Nick was 
invited to speak at the Ashoka Foundation in 
Washington D.C., and to prepare a video pre- 
sentation to promote Calyx's outreach efforts 
to the Internet community. 

In October 2012, Nick was also designat- 
ed one of twelve PopTech Social Innovation 
Fellows for 2012, and was invited by PopTech, 
a nonprofit global community of innovators, 
to appear at its 2012 Conference in Maine to 
share Calyx's mission and objectives and 
get feedback among like-minded innova- 
tors from different fields who met to work on 
some of society's toughest challenges. 
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Verizon draws fire for monitoring 
app usage, browsing habits 




In November, Calyx participated in the 
Circumvention Tech Summit held in Tunis, 
Tunisia which brought together activists 
from the Arab spring protests along with de- 
velopers working on Internet Freedom tools 
and software. 

Throughout 2012, Nick was frequently 
sought for interviews by reporters from the 
Wall Street Journal, CNN, Forbes, RT, Slate, 
Truthdig and others. The adjacent hyperlinks 
are some of the more extensive interviews: 



1. Slate: http://slate.me/1kCHw1w 

2. WSJ: http://on.wsj.com/1rizetLN 

3. Truthdig: http://bit.ly/lhOjvCX 
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SUBSEQUENT TO THE FISCAL YEAR-END of 
Calyx, the disclosure of NSA practices and 
PRISM program has garnered a great deal of 
publicity about privacy in general and Calyx 
in particular. As a result, we have continued 
to field a steady stream of inquiries and re- 
quests for interviews to address questions 
concerning governmental intrusion into elec- 
tronic communications of the public. 

In an effort to advance public understand- 
ing of effective anonymized and encrypt- 
ed Internet use, Calyx also hosted a privacy 
software training event (designated a Crypto 
Party) at which the general public was invit- 
ed to attend without charge and to bring their 
computers and hear from experts on setting 
up and configuring software that provides an- 
onymity in conducting Internet searches and 
communications. 

Most recently, Warren Habib, consulting 
CTO to several NYC-based startups, demon- 
strated tips and tricks of configuring Tor; 
Hans-Christoph Steiner of The Guardian 
Project demonstrated how to install, manage 
and use GPG email encryption software; 
and Nick Merrill demonstrated how to use 
TrueCrypt for encrypting computer files or 
cloud data. 
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FINANCIAL RESULTS 



CALYX CONTINUED to demonstrate 
growing financial strength even 
during this transitional year of devel- 
opment. For FY 2012, Calyx had contributions 
and grants that totaled $45,908, which was 
43% more than the total amount received in 
the prior fiscal year. Although still modest in 
absolute dollar terms, we are both grateful 
and delighted that our message resonates 
with so many on a personal level. From this 
amount, Calyx spent approximately $11,276 
on infrastructure development in preparation 
of launching its test bed this year to enable 
members and the general public to test and 
evaluate initially open source encrypted 
email software and later this year software 
to conduct encrypted Internet activities. Al- 
though some of the expenses were incurred to 
acquire equipment to begin building a server 
farm, the bulk of Calyx's expenses were relat- 
ed to the rental of office, storage and server 
space, which totaled $8,521, or approximate- 
ly 31% of Calyx's total expenses for the year. 
These expenses are expected to continue into 
FY 2013, and increase with respect to the cost 
of server space. However, Calyx expects that 
the significance of these general expenses 
will decline this year as a percentage of Ca- 
lyx's costs of advancing its overall mission 
and this year's program objectives. 

As previously mentioned, Calyx embarked 
on an ambitious crowdfunding campaign 
through lndiegogo.com. Many, if not most, of 
the 1,200 donations to the campaign were in 
modest amounts of less than $100. In return, 
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donors who contributed $25 or more received 
a token of appreciation (buttons, stickers, 
T-shirt), but nothing of significant value. Con- 
sequently, this initial fundraising campaign 
is a testament to the potential and popu- 
lar appeal of Calyx's direction and mission 
among individual donors who were willing to 
contribute to the Institute even though Ca- 
lyx's application for a determination of tax 
exemption is still pending with the IRS, and 
those donations were not tax deductible. 
Calyx spent approximately $11,510 in fund- 
raising costs for the campaign, which were 
incurred to pay the approximately 12% overall 
fees charged by the website to host the cam- 
paign and for supplies for premiums given to 
contributors. 

Also as discussed above, Calyx engaged 
in various outreach activities in confer- 
ences and in the press throughout the year. 
As part of its educational mission Calyx also 
conducted presentations and programs both 
at Calyx's New York office and at outside 
venues to introduce to the general public 
various methods to maintain privacy in com- 
munications. In the majority of cases, any 
expenses incurred for Calyx to participate 
were modest, and were ordinarily expensed 
directly by the sponsoring organization with 
which Calyx participated at no charge or 
cost to Calyx. These expenses are expected 
to increase significantly and to be borne by 
Calyx with Calyx's planned expansion of its 
educational and outreach programs in 2013. 

During the year, Calyx had an informal 
arrangement with a company located in 
Amsterdam in the Netherlands to host 



a server temporarily to maintain Calyx's 
website, provide a forum for information 
and enable Internet users to contact Calyx. 
This server was controlled by Calyx in New 
York. During FY 2012, certain hard drives in 
the server failed, and Calyx paid the cost of 
replacing the hard drives to enable the server 
to function for Calyx's benefit. Subsequent 
to the end of FY 2012, Calyx transferred most 
of its computer operations to its server farm 
located at a co-location facility in New York, 
and the majority of data are presently located 
at its server farm in New York. 

Calyx plans to seek donations from the 
general public to advance its mission and 
planned objectives during 2013. However, 
until a determination letter is issued, if at 
all, by the IRS to reflect that Calyx qualifies 
as a tax-exempt organization under Sec. 
501(c)(3) of the Internal Revenue Code, any 
such contributions will not be tax deductible 
to the contributor if made directly to the 
Institute. However, Calyx continues to have 
an agreement with Riseup Labs, Inc., a 
Washington nonprofit corporation, that is a 
tax-exempt organization under Sec. 501(c)(3) 
of the Code. Consequently, any contributions 
to Riseup Labs, Inc. that are designated for the 
benefit of Calyx should be tax deductible to 
the contributor to the fullest extent permitted 
by law. 1 



1. A contributor should consult with a tax advisor 
as to the tax deductibility of any specific donation. 
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PARTNERSHIPS 



RISEUP LABS, INC.: As one of the earliest 
supporters of Calyx, Riseup entered into 
an fiscal sponsorship agreement to enable 
donors to contribute to Calyx through Riseup, 
and enable donors to claim their contribu- 
tions made through Riseup as tax deductible 
from US Federal income taxes to the fullest 
extent permitted to them by law. 



TELEHOUSE INTERNATIONAL CORPORATION 
OF AMERICA: Calyx entered into an annual 
evergreen agreement for rack space to enable 
Calyx to establish its server farm centrally 
located to ensure as high a level of connec- 
tivity on a cost-effective basis as possible in 
New York City to promote its activities on the 
Internet. 



MOBILE CITIZEN, LLC: Calyx entered into a 
two-year renewable agreement with Mobile 
Citizen LLC to be able to offer a limited 
number of free wireless broadband services 
to members of Calyx. This service is offered by 
Clearwire telecommunications and provides 
Internet access in more than 70 regions of 
the United States. This tremendous service 
will be offered at cost to Calyx among the 
benefits available to Select Members of Calyx 
who demonstrate dedicated commitment to 
Calyx, its mission and objectives. 




HURRICANE ELECTRIC, INC.: Hurricane has 
agreed to provide the high quality Internet 
connectivity on a IGb/circuit to support 
Calyx's platform for testing encryption 
software and scalability among members 
throughout the world. 

LEAP ENCRYPTION ACCESS PROJECT: Calyx 
has partnered with LEAP to test and dissem- 
inate the open source software suite being 
developed by LEAP to advance the encryption 
and privacy objectives of Calyx. To date, 
Calyx has been integrating and beta testing 
webmail encryption and VPN capabilities 
initially, and plans to make these services 
available to Calyx members and the general 
public in the near future. 



The Calyx Institute 



LEGAL SUPPORT AND ALLIANCES 



CALYX BENEFITS from considerable legal support provided by a number of practitioners 
dedicated to its success. Led by Bart Wu who serves as its outside General Counsel, Calyx 
has benefited from advice and support provided by the following: 




BROOKLYN LAW SCHOOL INCUBATOR 
PROGRAM: Thanks to fellow Advisory Board 
member, Prof. Jonathan Askin, BLIP has 
provided interns and legal support as well as 
a venue for Calyx to discuss some of its ideas 
and strategies for ensuring freely available, 
protected and secure Internet access 
throughout the world. 

ELECTRONIC FRONTIER FOUNDATION: Calyx 
enjoys many common objectives with EFF, 
and has been fortunate to receive legal 
support from EFF and its stellar internship 
program that began and has continued since 



2012. Calyx endorses the open source HTTPS 
Everywhere application spearheaded by EFF, 
and has periodically joined with EFF in some 
of its initiatives. 

THE BERKMAN CENTER FOR INTERNET 
&. SOCIETY AT HARVARD LAW SCHOOL 
CYBERLAW CLINIC: Calyx has been most 
fortunate to retain the Cyberlaw Clinic to 
address privacy law issues involving mobile 
communications, and Calyx looks forward to 
a continuing relationship with the Cyberlaw 
Clinic on an ongoing basis. 
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ADVISORY BOARD 



CALYX HAS BEEN incredibly fortunate to be able to enlist and rely upon a board of advisors 
who are prominent in the field of cybersecurity, Internet privacy, technology and commu- 
nications. As Calyx launches its educational programs and services, it looks forward to a 
close working relationship with these titans in their respective fields. 



Jacob Applebaum, Staff Research 
Scientist, University of Washington 

Jonathan Askin, Professor of Law, 
Brooklyn Law School 

John Perry Barlow, Wyoming rancher, 
co-founder, Electronic Frontier 
Foundation 

Bob Barr, Attorney, former member of 
Congress, former US Attorney N.D.GA 

Ian Clarke, Founder and coordinator, 
Freenet Project 

Nathan Freitas, [Fearless] Leader of The 
Guard/an Project 

Susan Herman, President, American 
Civil Liberties Union 

Rebecca MacKinnon, Bernard L. 
Schwartz Sen/or Fellow, New America 
Foundation 



Sascha Meinrath, Director, New 
America Foundation Open Technology 
Initiative 

Meredith L. Patterson, Independent 
researcher 

Laura Poitras, Documentary filmmaker, 
2012 MacArthur Fellowship recipient 

Eleanor Saitta, Principal Security 
Engineer, Open Internet Tools Project 

Brian Snow, Retired, former Technical 
Director, NSA 

Jason Alan Snyder, Technologist, 
futurist, innovation catalyst and inventor 

Window Snyder, Senior Project 
Manager, Security and Privacy, Apple, Inc. 



ENHANCED THE BOARD OF DIRECTORS 



CALYX IS GOVERNED by a Board of 
Directors composed of members with 
diverse backgrounds, but common 
objectives. Earlier this Spring, Calyx was 
fortunate to enlist the support of Steven 
Gelmis as a fourth member of the Board. 
Steve was the founder, CEO (until 2005) and 
Chairman (until 2011 when the companies 
were sold) of Public Interest Network Services 
and Public Interest Telecommunications 



Inc. He brings a wealth of experience in 
management and strategy in the telecommu- 
nications field, and on whose guidance Calyx 
has significantly relied. Although currently 
retired, Calyx is guardedly optimistic that 
Steve will continue in an active role in its de- 
velopment and success. 

The other members of the Board are: 
Nicholas Merrill, Executive Director; Micah 
Anderson, Director; and Kobi Snitz, Director. 
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Where We Are Going 



THE CALYX INSTITUTE will continue to 
advance its mission to make encryption 
easier to use and to educate the public 
and specific constituencies to use security 
tools. 

Towards that goal it will promote 
democracy and open societies by aiding jour- 
nalists, human rights organizations and civil 
society organizations operate more safely by 
engaging in improved secure communica- 
tions practices. 

In addition it will continue to educate, 
advocate for, promote the use of, and build in- 
frastructure to support the use of encryption 
anonymity and privacy tools among citizens of 
repressive regimes where Internet censorship 
and surveillance are used. Forcitizens of these 
countries, privacy tools are literally a lifeline to 
freedom of expression and association. 

DEVELOPING EDUCATIONAL 
MATERIALS AND PROGRAMS TO 
GUIDE USERS TO SAFE AND SECURE 
INTERNET USE 

WE HAVE BEGUN a long-term 
project to develop a set of training 
materials intended to be used by 
non-technical Internet users that explain 
in easy to understand terms how to secure 
various types of Internet traffic using free 
open source software. 

We also have a separate project to 
develop academic curricula and teaching 
kits designed for teaching Internet and data 
security in journalism schools. 



SOFTWARE DEVELOPMENT AND 
RESEARCH 

WORK ON LEAP 

THROUGHOUT 2012, The Calyx Institute has 
been collaborating with LEAP Encryption 
Access Project (https://leap.se) on its 
software platform. Our contributions have 
included additions to the architecture and 
design specifications as well as trouble- 
shooting and participation in beta testing of 
the server platform as well as bug finding and 
reporting with respect to the Bitmask clients 
on Mac OSX, Linux and Windows. 

ENCRYPTED VIDEO CONFERENCING 
PROJECT 

THE CALYX INSTITUTE has also been developing 
a detailed technical specification for an open 
source Video Conferencing system designed 
to be a free and secure replacement for Skype 
that could be used internally by human rights 
organizations, NGOs, newspapers and other 
journalism businesses and civil society or- 
ganizations, as well as for use by the general 
public. The project was proposed for funding 
in a Statement of Interest (SOI) to the US 
Department of State, Bureau of Democracy, 
Human Rights and Labor in partnership 
with Internews (https://www.internews.org), 
an International NGO, but unfortunately the 
proposal was not accepted. Nonetheless, we 
continue to seek funding from other sources 
to move forward with the project and hope to 
get to that point in the upcoming year. 
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GEOLOCATION COUNTERMEASURE 
RESEARCH 

ALONG WITH COLLEAGUES at Harvard Uni- 
versity's Berkman Center for Internet and 
Society, we engaged in preliminary legal 
research necessary before engaging in 
software research and development relating 
to countermeasures against geolocation of 
mobile phone users. This initial research 
was focused solely on the laws of the United 
States. In the upcoming fiscal year we have 
agreed to expand the research to examining 
the laws of a further ten countries. 

PROVISIONING FREE NETWORK PRIVACY/ 
ANONYMITY/CENSORSHIP CIRCUMVENTION 
SERVICES THROUGH CALYX'S DATACENTER 
TO ASSIST INTERNET USERS TO MAINTAIN 
PRIVACY AND FREE SPEECH 

THE CALYX INSTITUTE has undertaken an 
effort to provide free infrastructure for 
privacy enhanced communications over 
public networks. This has been done both on 
our own and also in conjunction with some 
of the software development and systems 
design work of our partner organizations, The 
Guardian Project, LEAP, and The Tor Project. 

1. Some of the infrastructure we 
have made available includes: 

2. The previously mentioned LEAP 
service platform 

3. Tor servers (nodes) which provide 
encryption and anonymity 

4. A publicly accessible Jabber/ 
XMPP server for encrypted Instant 
Messages 

5. A publicly accessible instance of 
Guardian Project's Open Secure 
Telephony Network (OSTN) 



ADVANCING OUTREACH TO 
PROMOTE GREATER COMMUNITY 
PARTICIPATION AND BENEFITS OF 
ACCESS TO THE INTERNET 

AS MENTIONED PREVIOUSLY, the Calyx 
Institute held two events at our offices 
on Spring Street in Manhattan during 
the2012fiscalyear,and participated inseveral 
national and international symposiums on 
privacy or censorship circumvention. 

In the upcoming fiscal year we are going 
to be releasing a website and a series of 
training videos relating to privacy, security 
and anonymity using the Tor network. We will 
also be holding a series of training sessions 
in New York to introduce these training 
materials to certain communities of expa- 
triates. For example, two programs that are 
being developed are tentatively described as 
follows: 

INTRODUCTION TO DATA SECURITY 

ALTHOUGH RECENT STUDIES have shown 
that the vast majority of people who use the 
Internet are concerned about data security 
and securing the privacy of their communi- 
cations, some individuals, such as journal- 
ists and human rights workers among others, 
have a clear and immediate need to ensure 
the confidentiality of their communications. 
In this program journalists and human 
rights workers and others similarly situated 
will learn to secure their data, protect their 
sources, and become more confident in 
digital security. This program emphasizes 
core concepts, skills and free open source 
standards-based software packages that 
equip journalists and human rights workers 
to defend their digital communications and 
protect their data from being unintentionally 
disclosed to third parties. 

The associated set of training materials 
will cover the basics: 
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1. What is encryption and how 
might it be useful 

2. Email encryption 

3. Document and file encryption 

4. Instant message encryption 

5. Anonymous web browsing and 
searching 

6. General operations security 
guidelines 

Prerequisite: Basic computer proficiency 
and familiarity with web browsing concepts. 

ADVANCED DATA SECURITY 

THIS PROGRAM COVERS more advanced 
techniques that build upon the fundamen- 
tals introduced in the Introduction to Data 
Security program. It emphasizes additional 
ways to transmit information and commu- 



nicate more securely and includes training 
materials that cover the following topics: 

1. Layering or cascading of data 
encryption techniques 

2. Voice encryption on mobile 
phones 

3. Encrypted video conferencing 

4. Circumvention tools for evading 
internet censorship 

5. "Air-gapped" computers and data 
hygiene 

Prerequisite: Introduction to Data Security 
Program. 

Additional educational programs are also 
contemplated to address the particular needs 
of other privacy-sensitive groups, including 
lawyers, doctors and law enforcement and 
other governmental officials. 



2012 Annual Report 



19 



Calyx is required to file an annual report on Form CHAR 500 along with the ap- 
propriate Form 990 or 990-EZ with the Charities Bureau in the office of the New 
York State Attorney General. A copy of that annual report may be obtained, 
upon request, from the Institute at the address set forth on the Institute's 
website under "Contact Info and Directions", or from the Charities Bureau, New 
York State Attorney General, 120 Broadway, 3rd Floor, New York, New York 10271. 
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